fix(Dockerfile): use temporary busybox mount to create /kaniko directory

Makefile

@@ -92,16 +92,10 @@ k8s-executor-build-push:
 	DOCKER_BUILDKIT=1 docker build ${BUILD_ARG} --build-arg=GOARCH=$(GOARCH) -t $(REGISTRY)/executor:latest -f deploy/Dockerfile .
 	docker push $(REGISTRY)/executor:latest
 
-files/kaniko:
-	mkdir files/kaniko
-
-files/kaniko.tar: files/kaniko
-	chmod 777 files/kaniko
-	cd files && tar cf kaniko.tar kaniko
 
 .PHONY: images
 images: DOCKER_BUILDKIT=1
-images: files/kaniko.tar
+images: 
 	docker build ${BUILD_ARG} --build-arg=GOARCH=$(GOARCH) -t $(REGISTRY)/executor:latest -f deploy/Dockerfile .
 	docker build ${BUILD_ARG} --build-arg=GOARCH=$(GOARCH) -t $(REGISTRY)/executor:debug -f deploy/Dockerfile_debug .
 	docker build ${BUILD_ARG} --build-arg=GOARCH=$(GOARCH) -t $(REGISTRY)/executor:slim -f deploy/Dockerfile_slim .

deploy/Dockerfile

@@ -36,17 +36,20 @@ RUN mkdir -p /kaniko/.docker
 
 COPY . .
 RUN \
-    --mount=type=cache,target=/root/.cache/go-build \
-    --mount=type=cache,target=/go/pkg \
-    make GOARCH=$TARGETARCH
+  --mount=type=cache,target=/root/.cache/go-build \
+  --mount=type=cache,target=/go/pkg \
+  make GOARCH=$TARGETARCH
 
 # Generate latest ca-certificates
 FROM debian:bullseye-slim AS certs
 RUN apt update && apt install -y ca-certificates
 
 FROM scratch
 # Create kaniko directory with world write permission to allow non root run
-ADD files/kaniko.tar /
+RUN --mount=from=busybox:latest,src=/bin/,dst=/bin/ \
+  mkdir -p /kaniko && \
+  chmod 777 /kaniko
+
 COPY --from=0 /src/out/executor /kaniko/executor
 COPY --from=0 /usr/local/bin/docker-credential-gcr /kaniko/docker-credential-gcr
 COPY --from=0 /usr/local/bin/docker-credential-ecr-login /kaniko/docker-credential-ecr-login

deploy/Dockerfile_debug

@@ -46,6 +46,10 @@ FROM debian:bullseye-slim AS certs
 RUN apt update && apt install -y ca-certificates
 
 FROM scratch
+# Create kaniko directory with world write permission to allow non root run
+RUN --mount=from=busybox:latest,src=/bin/,dst=/bin/ \
+	mkdir -p /kaniko && \
+	chmod 777 /kaniko
 COPY --from=0 /src/out/executor /kaniko/executor
 COPY --from=0 /src/out/warmer /kaniko/warmer
 COPY --from=0 /usr/local/bin/docker-credential-gcr /kaniko/docker-credential-gcr

deploy/Dockerfile_slim

@@ -31,6 +31,11 @@ FROM debian:bullseye-slim AS certs
 RUN apt update && apt install -y ca-certificates
 
 FROM scratch
+
+# Create kaniko directory with world write permission to allow non root run
+RUN --mount=from=busybox:latest,src=/bin/,dst=/bin/ \
+  mkdir -p /kaniko && \
+  chmod 777 /kaniko
 COPY --from=0 /src/out/executor /kaniko/executor
 COPY files/nsswitch.conf /etc/nsswitch.conf
 COPY --from=certs /etc/ssl/certs/ca-certificates.crt /kaniko/ssl/certs/

deploy/Dockerfile_warmer

@@ -45,6 +45,10 @@ FROM debian:bullseye-slim AS certs
 RUN apt update && apt install -y ca-certificates
 
 FROM scratch
+# Create kaniko directory with world write permission to allow non root run
+RUN --mount=from=busybox:latest,src=/bin/,dst=/bin/ \
+  mkdir -p /kaniko && \
+  chmod 777 /kaniko
 COPY --from=0 /src/out/warmer /kaniko/warmer
 COPY --from=0 /usr/local/bin/docker-credential-gcr /kaniko/docker-credential-gcr
 COPY --from=0 /usr/local/bin/docker-credential-ecr-login /kaniko/docker-credential-ecr-login